Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/moSCkB99dTSGcpgDvcy5aQkFffQ.roa
File: moSCkB99dTSGcpgDvcy5aQkFffQ.roa (raw, json)
Hash identifier: aiAaZEMFPXxP/roq+smilE6RMbRm1fGzNqjZ/MzsVdI=
Subject key identifier: 9A:84:82:90:1F:7D:75:34:86:72:98:03:BD:CC:B9:69:09:05:7D:F4
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0184844FF8B7498AD1EC14A0FADF877DA5BB
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/moSCkB99dTSGcpgDvcy5aQkFffQ.roa
Signing time: Thu 17 Nov 2022 06:39:04 +0000
ROA not before: Thu 17 Nov 2022 06:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 212.111.211.0/24 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.218.0/23 maxlen: 24
185.143.56.0/22 maxlen: 24
77.47.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:84:4f:f8:b7:49:8a:d1:ec:14:a0:fa:df:87:7d:a5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 17 06:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a8482901f7d753486729803bdccb96909057df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:b7:8e:10:de:58:68:0e:09:c4:70:b4:b4:
58:0e:a8:a7:b3:b9:30:b5:8f:6e:d8:e4:b0:7f:1c:
aa:fa:3c:b4:f9:71:2b:c2:37:8b:f2:b0:a8:81:c4:
9b:1e:f3:6c:2a:36:46:83:d0:3a:4e:c7:5f:40:04:
d0:f8:f9:d0:55:e2:c6:0e:67:3e:f7:f5:78:78:b5:
4b:d4:9c:bb:a9:a6:8a:01:6f:7c:d5:a2:da:97:c4:
33:f3:29:b1:3a:08:e2:0d:64:e2:36:35:af:f9:37:
cf:0d:23:f2:b6:0b:ec:ac:bf:f7:57:02:1d:e9:42:
54:46:25:bb:c9:21:33:01:f9:b8:fa:31:64:ca:3b:
b6:e0:80:fe:61:a5:ce:24:20:d7:16:54:da:7a:f2:
4c:16:58:85:d0:4d:84:54:24:42:56:8a:a7:ec:6b:
a1:6c:60:07:3b:18:30:6b:8e:bb:b3:9e:c2:6a:94:
e0:0e:a3:e8:c1:97:1e:6e:f8:ba:8e:d1:a3:5a:76:
dc:51:47:3c:23:fd:e4:b2:b6:1a:30:fe:38:a8:a8:
55:3b:82:05:89:00:02:25:51:9b:20:53:51:2d:af:
b1:bc:80:27:5c:e7:18:b7:71:2c:bc:f5:f6:0a:36:
25:1b:d4:ac:0a:ae:0c:34:13:c9:51:a0:e5:98:5d:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:84:82:90:1F:7D:75:34:86:72:98:03:BD:CC:B9:69:09:05:7D:F4
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/moSCkB99dTSGcpgDvcy5aQkFffQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.180.0/22
185.143.56.0/22
212.111.211.0/24
212.111.216.0/22
Signature Algorithm: sha256WithRSAEncryption
99:f2:af:f8:02:45:f3:0f:0e:9a:a5:35:df:b6:3f:e7:02:9c:
b7:53:b6:3b:d4:6b:ec:d7:86:3f:d2:f3:11:c4:b9:26:31:96:
c5:81:bd:14:26:cb:19:f7:8e:41:d6:1e:ca:8b:63:98:75:90:
5d:45:88:2d:ed:c5:96:02:6b:75:cd:2f:71:af:09:2d:ca:37:
85:ae:26:8c:e8:32:fc:84:30:c5:94:bc:7f:d5:15:84:74:bb:
9d:a5:d9:96:b1:c5:31:93:22:ed:65:cf:58:ad:c9:89:53:c5:
ff:f8:6d:e6:ad:eb:17:de:5a:1e:2a:ae:23:53:e1:d8:ae:b9:
49:b8:70:7d:87:79:e1:58:28:0b:08:52:ab:c1:67:01:7e:cf:
22:cb:69:aa:41:7a:0d:1e:1d:1d:d0:c2:ab:ef:33:8f:9c:4f:
e6:5b:42:66:75:2c:41:ab:28:06:86:10:2a:eb:28:3a:57:ef:
77:32:2c:94:2f:9a:b5:a2:3d:51:6f:2d:fb:2e:22:6c:8d:4c:
9c:2e:a6:02:56:cd:a1:77:20:66:26:ff:b4:c9:45:07:7c:85:
66:ed:0f:4c:29:e5:bf:6d:8c:4d:5e:5a:e7:e5:44:b6:78:5f:
a2:b1:79:cc:15:dc:32:90:50:08:c3:58:eb:60:c2:2b:68:30:
44:e4:6d:9b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYSET/i3SYrR7BSg+t+HfaW7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjIxMTE3MDYzOTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTg0ODI5MDFmN2Q3NTM0ODY3Mjk4MDNiZGNjYjk2OTA5MDU3ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHa3jhDeWGgOCcRwtLRYDqins7kw
tY9u2OSwfxyq+jy0+XErwjeL8rCogcSbHvNsKjZGg9A6TsdfQATQ+PnQVeLGDmc+
9/V4eLVL1Jy7qaaKAW981aLal8Qz8ymxOgjiDWTiNjWv+TfPDSPytgvsrL/3VwId
6UJURiW7ySEzAfm4+jFkyju24ID+YaXOJCDXFlTaevJMFliF0E2EVCRCVoqn7Guh
bGAHOxgwa467s57CapTgDqPowZcebvi6jtGjWnbcUUc8I/3ksrYaMP44qKhVO4IF
iQACJVGbIFNRLa+xvIAnXOcYt3EsvPX2CjYlG9SsCq4MNBPJUaDlmF1SuwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJqEgpAffXU0hnKYA73MuWkJBX30MB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvbW9TQ2tCOTlkVFNHY3BnRHZjeTVhUWtGZmZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCTS+0AwQC
uY84AwQA1G/TAwQC1G/YMA0GCSqGSIb3DQEBCwUAA4IBAQCZ8q/4AkXzDw6apTXf
tj/nApy3U7Y71Gvs14Y/0vMRxLkmMZbFgb0UJssZ945B1h7Ki2OYdZBdRYgt7cWW
Amt1zS9xrwktyjeFriaM6DL8hDDFlLx/1RWEdLudpdmWscUxkyLtZc9YrcmJU8X/
+G3mresX3loeKq4jU+HYrrlJuHB9h3nhWCgLCFKrwWcBfs8iy2mqQXoNHh0d0MKr
7zOPnE/mW0JmdSxBqygGhhAq6yg6V+93MiyUL5q1oj1Rby37LiJsjUycLqYCVs2h
dyBmJv+0yUUHfIVm7Q9MKeW/bYxNXlrn5US2eF+isXnMFdwykFAIw1jrYMIraDBE
5G2b
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org